Firefox · DOM
CVE-2026-117905
Logic Error in DOM
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
ifdom/media/mediaelement/HTMLMediaElement.cpp |
modified |
Files Changed
dom/media/mediaelement/HTMLMediaElement.cppdom/media/webvtt/TextTrackManager.cpp
Patch
diff --git a/dom/media/mediaelement/HTMLMediaElement.cpp b/dom/media/mediaelement/HTMLMediaElement.cpp
index 4d8fca7a7ed..23a897cae83 100644
--- a/dom/media/mediaelement/HTMLMediaElement.cpp
+++ b/dom/media/mediaelement/HTMLMediaElement.cpp
@@ -3800,6 +3800,7 @@ void HTMLMediaElement::Pause(ErrorResult& aRv) {
}
void HTMLMediaElement::PauseInternal() {
+ RefPtr<HTMLMediaElement> kungFuDeathGrip(this);
if (mDecoder && mNetworkState != NETWORK_EMPTY) {
mDecoder->Pause();
}
@@ -6914,6 +6915,8 @@ void HTMLMediaElement::ChangeReadyState(nsMediaReadyState aState) {
return;
}
+ RefPtr<HTMLMediaElement> kungFuDeathGrip(this);
+
nsMediaReadyState oldState = mReadyState;
mReadyState = aState;
LOG(LogLevel::Debug, ("{} Ready state changed to {}", fmt::ptr(this),
@@ -7789,6 +7792,7 @@ bool HTMLMediaElement::ShouldQueueTimeupdateAsyncTask(
void HTMLMediaElement::FireTimeUpdate(TimeupdateType aType) {
NS_ASSERTION(NS_IsMainThread(), "Should be on main thread.");
+ RefPtr<HTMLMediaElement> kungFuDeathGrip(this);
if (ShouldQueueTimeupdateAsyncTask(aType)) {
RefPtr<nsMediaEventRunner> runner =
diff --git a/dom/media/webvtt/TextTrackManager.cpp b/dom/media/webvtt/TextTrackManager.cpp
index 8dd326aaa04..61d72676dd9 100644
--- a/dom/media/webvtt/TextTrackManager.cpp
+++ b/dom/media/webvtt/TextTrackManager.cpp
@@ -591,6 +591,7 @@ void TextTrackManager::DispatchTimeMarchesOn() {
// https://html.spec.whatwg.org/multipage/embedded-content.html#time-marches-on
void TextTrackManager::TimeMarchesOn() {
NS_ASSERTION(NS_IsMainThread(), "Wrong thread!");
+ RefPtr<TextTrackManager> kungFuDeathGrip(this);
mTimeMarchesOnDispatched = false;
CycleCollectedJSContext* context = CycleCollectedJSContext::Get();
Loading diff…
References
On This Page